10193 matches found
Malicious code in mgz-testpkg (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c82f0658f0d08613ec76f5066bad323001a5a95afc35b8befc4a34c82a68e0a7 The OpenSSF Package Analysis project identified 'mgz-testpkg' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...
Malicious code in ngf-gov-hr-navbar (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85f2baa5c5673490af93199349e0ef54f7c581115b1fa83d6df2c9e18430e031 The OpenSSF Package Analysis project identified 'ngf-gov-hr-navbar' @...
MAL-2025-6212 Malicious code in prospects (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3937cc0353b0952f14ff2d9e68216f857e4ffc01f688f600948c6d1b234915a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in realtime-demo (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 25e65ca84d64481a7631998dd140a2b8cecaa7b5716bb71dc08ff53e700a10aa The OpenSSF Package Analysis project identified 'realtime-demo' @...
Malicious code in model-providers (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3bc812776fc9ca2678deabf678d9dae58067e353d0d7131e35d68fa452ff57f5 The OpenSSF Package Analysis project identified 'model-providers' @...
Malicious code in handoffs (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in so-demo (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6123 Malicious code in realtime-next (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in test-package-avinav (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 db665678ac908b6f9aa76ef069759ebd70b62c901a6f840b765ba7cac299c423 During installation, a heavily obfuscated code is executed. Exact behaviour unclear --- Category: MALICIOUS - The campaign has clearly malicious intent, like...
Malicious code in tw-core-ui (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware effb17ff1202bd8522ed8a37591dc22da8c39ed2554771c3566b2ac7d4e356f2 Any computer that has this package installed or running should be considered...
Malicious code in matka (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6117 Malicious code in preview-server-auth-bounty (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5816 Malicious code in os-apps-ui-placement-manager (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6184 Malicious code in nbastatsleftnav (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 514ea2a983874eb46d5517a63e127b2503b1f9a0dc1ffa0a726e5f1dbd7559b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @blocks-shared/atom-panel (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c591a20fbe6de7639db5ac559fbc7db95960967fb3eb809e6fe2f58943f4a75 The OpenSSF Package Analysis project identified...
MAL-2025-5757 Malicious code in os-apps-ui-traffic-manager (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cdf3d7006b0b2cb524eb3e2fb401636a3a58bd02e1f9296ba89d576397b8831f The OpenSSF Package Analysis project identified...
MAL-2025-5809 Malicious code in dep-confusion-poc-monke (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd5eadc84c6eaa4f7eb92319cac88bbe0057e1eb86646846287104d5d7d8f9c0 Any computer that has this package installed or running should be considered...
Delta Electronics DTM Soft
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to encrypt files referencing the application in order to extract information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability,...
MAL-2025-5755 Malicious code in tutorial_front (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8c37adc01a1128e0458364194c6aae8faaeb4f5ce55cfe0aee587ea5d5fc751 Any computer that has this package installed or running should be considered...